Privacy policy

Stubble & Co Privacy Policy

Stubble & Co is committed to ensuring that your privacy is protected. This privacy policy sets out how we use and protect any information that we collect from you or about you. Stubble & Co may change this policy from time to time by updating this page. Please check this page from time to time to ensure that you are happy with any changes.

This privacy policy was last updated on 15th February 2024.

Who we are

For the purposes of the General Data Protection Regulation Act 2017, the data controller is BV Brands Limited (our registered company name) and our registered address is Croft Chambers, Bancroft, Hitchin, England, SG5 1JQ.

Our data protection officer is our Head of Digital. Please see below for contact details for any data protection queries.

What we collect

We may collect the following types of personal information:

1. Information about your identity, such as your name;
2. Contact information including your email address, delivery address, billing address and, in some instances, telephone number;
3. Demographic information such as postcode, preferences and interests;
4. Other information relevant to customer surveys and/or offers or competitions, such as age, gender, sports that you participate in or follow, and your social media habits;
5. Information about your activity on our website such as IP address, device ID, cookie data, browsing history and location. Please see our cookie policy for more information link;
6. Information that you provide in reviews you leave on our website;
7. Your marketing communication preferences;
8. Your purchase history.

How we collect it

We use different methods to collect data from and about you including:

1. Data that you provide to us:

This includes data that you provide when making an purchase from our website, corresponding with us by post, phone email or otherwise and when entering competitions or participating in surveys.

2. Data that we collect from automatically:

When you visit our website we may automatically collect information which helps us build a picture of our users. For example, technical data via cookies when you browse and use our website or our app.

3. Data that we receive from third party sources:

We may receive additional information about you, such as demographic data or fraud detection information, from third party service providers and/or partners. We add this to the  information that we have collected from you in order to improve our service and any marketing that you receive from Stubble & Co. We also receive data from third party providers such as Yotpo (an e-commerce brand marketing platform).

What we do with the information we gather

We use your data for the following:

•   To process and deliver your order or provide services;
•   For customer service and resolution purposes such as responding to any enquiries that you make;
•   For internal record keeping and to comply with our legal obligations arising from contracts that we enter in to with you. For example, keeping records of transactions for VAT reporting purposes.;
•   To improve our products and services, for example by measuring and understanding how our customers use our website through data analysis, data aggregation and customer profiling. Profiling is the processing of personal data in an automated way, and allows us to evaluate your preferences, interests, habits, behaviour etc in order to better understand our customer base. This enables us to make predictions and send you information that is tailored to you.
•   To provide you with information about goods or services, including special offers, that we feel may interest you. If you are an existing customer, we will only contact you by electronic means (e-mail or SMS) with information about goods and services similar to already purchased or enquired about. You may opt out of this at any time by emailing hello@stubbleandco.com. If you are a new customer, we will contact you by electronic means for marketing purposes only if you have consented to this;
•   To contact you for market research purposes. We may contact you by email, phone or mail;
•   To personalise your experience on our website;
•   To send you marketing information by post. You are free to opt out of this at any time by writing to or emailing us at hello@stubbleandco.com;
•   From time to time, we may use remarketing and behavioural targeting services. In order to do these, we collect cookies and usage data as described below in the “How We Use Cookies” section. These cookies connect activity on this website with select advertising networks;
•   To detect and prevent fraud on our website and app;

What is our legal basis for processing your data 

Contracts

When you make a purchase from us, we will process your data to fulfil our contractual obligations for the contract that we have entered in to. For example, using your address to deliver your online purchase to you.

Legal Obligation

When you make a purchase from us, we will process your data to fulfil the legal obligations that we are bound to comply with, such as tax for VAT purposes.

Legitimate Interests

When you make a purchase from us, we will process your data under the basis of legitimate interests. Legitimate interest is the interest of our company to conduct and manage our business and provide you with the best and most secure customer experience possible. When we process your information under legitimate interests, we take care to balance our actions with your rights and interests under data protection law.

Consent

If you have shared your information with us through the sign-up on our website, you have provided consent for us to process your data and use it in the ways described in this privacy policy. The terms under which you are providing consent (for example this document) will be available for you to read at the time of signing up. You can withdraw this consent at any time by contacting us at hello@stubbleandco.com.

Who we share your information with

In order to provide our services, we may need to provide your information to our third party partners, for example:

1. Our fulfilment partners in order to ensure we can process and complete your order, for example payment service providers and delivery companies;
2. Our marketing partners in order to offer you services and products that may be of interest to you;
3. Our technology partners to ensure we can provide a safe and secure site and improve the performance and relevance of our site to you;
4. Our professional services partners in order to comply with our legal obligations;
5. Where you have consented to such sharing, our competition and brand partners
6. Credit reference agencies, law enforcement and fraud prevent on agencies, in an effort to prevent fraud.

In the event that we in the event that we sell or buy any business or assets, we may also disclose your personal data to the prospective seller or buyer of such business or assets.

Links to other websites

Where our website contains links to third party websites, this Privacy Policy does not cover how those organisations process personal data and. Stubble assumes no responsibility for the privacy practices or the content of these websites.

International transfers

To deliver products and services to you, it is sometimes necessary for us to share your data outside of the UK and/or EEA. This will typically occur when service providers are located outside the UK/EEA or if you are based outside the UK or EEA. These transfers are subject to special rules under data protection laws.

In the case of such transfers, we will ensure that the transfer will be compliant with data protection law so that your personal information will be secure. We ensure safeguards are in place to protect your data and use data protection clauses to protect your privacy. Our standard practice is to use ‘standard contractual clauses’ for international transfers which have been approved by the European Commission.

Security

We take all appropriate technical and organisational measures to protect your data. These include measures that reduce the risk of loss, misuse, unauthorised access, disclosure and alteration. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. 

All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using TLS technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Your rights 

Under applicable data protections law you have the following rights:

• Right to be Informed: about how we are handling your personal data and where it is going.
• Right to Rectify: the right to have require us to correct any inaccuracies in your data.
• Right to be Forgotten: in certain circumstances you can request that we delete all information we hold which identifies you.  Please note that we may need to retain certain data due to specific legislative or regulatory requirements, for example copies of invoices in case of an HMRC investigation.
• Right to Withdraw Consent: if you have consented to us processing your data you can change your mind at any time. This will not affect the lawfulness of any processing carried out before you withdraw your consent.
• Right to Data Portability: you can ask us to transfer a copy of your data to yourself or a this party.
• Right to Object to Processing: the right to object to our processing of your data if you feel it impacts on your fundamental rights and freedoms, and we do not have compelling legitimate grounds to process your information which override your rights and freedoms.
• Right to Complain to a Supervisory Authority: when you would like to take a case to a data protection regulator.
• Right to Object to Automated Decision Making: you have the right to object to the use of automated decision-making (making a decision solely by automated means without any human involvement) and profiling (automated processing of personal data to evaluate certain things about an individual).

If you would like to exercise any of these rights, or just ask a question, please contact us a hello@stubbleandco.com.

Data retention

We will keep your personal information for as long as is necessary for the purpose for which it has been obtained and then for as long as there is any risk of a potential claim, which will be dependent upon the limitation period for the particular type of claim. We have set out below the main retention periods which will apply:

• If you make a purchase from our website, we will retain your data for as long as we continue to have a relationship with you and then for a period of 2 years afterwards.
• For non-purchasing website users we will generally retain your data for a period of 60 days after your visit.
• In respect of competition entries, we will retain your data for as long as you are engaging with us.
• For individuals seeking information, making complaints or otherwise corresponding with us it will generally be 1 year.

 Contacting us about your personal information

Please contact us at hello@stubbleandco.com if you have questions about this privacy policy.

 

Privacy Addendum for California and Certain Other U.S. Customers

The following provisions apply to our customers and website users who are California residents and are intended to address the requirements of the California Consumer Privacy Act of 2018, as amended from time to time (the “CCPA”). As applicable, this Addendum also applies to residents of other States in the United States of America that provide for similar consumer privacy protections.

Selling your information. We do not sell personal data in exchange for monetary compensation. We may allow certain third parties (such as advertising technology partners, data analytics providers, and social networks) to collect or receive your data in order to provide you with tailored content and advertising. You have the right to opt out of this disclosure of your information as follows:

• To opt-out of the use of cookie data for the purposes of targeted advertising by selecting Manage preferences in the cookie banner and setting your cookie preferences to deny.
• To opt out of the use of email address for the purpose of marketing communications and targeted advertising, email hello@stubbleandco.com.
• We also honour your opt-out preference by recognizing user-enabled Global Privacy Control (GPC) as a valid opt-out requests (on the browsers or browser extensions that support such a signal).

Please see our Cookie Policy provides more detailed information about the cookies we use and how you can manage them.

Your rights: Subject to exceptions and certain limitations under applicable law, you may have certain choices regarding our use and disclosure of your personal data, as described below:

•   Access: You may request that we disclose to you (i) the categories of personal data we have collected about you, (ii) the categories of sources of that data, (iii) the business or commercial purpose for collecting or selling (if applicable) the personal data, (iv) the categories of third parties with whom we share personal data, and the categories of personal data shared; (v) the specific pieces of your personal data that we have collected, used, disclosed, or sold.
•   Correction: You may request that we correct your personal data if it is inaccurate.
•   Deletion: You have the right to request that we delete the personal data we have collected from you. Deletion requests are subject to certain limitations, for example, we may retain personal data as permitted by law, such as to maintain an active account, to process transactions and facilitate customer requests, and for certain other internal business purposes described in our Privacy Policy.
•   Automated Decision-making: You have the right to opt-out of certain profiling activities.
•   Opt-Out: As mentioned above, you have the right to opt-out of targeted advertising and the sharing of personal data for that purpose.

To exercise these rights, you can contact us directly at hello@stubbleandco.com. If we deny your privacy request, you may appeal the decision by contacting us at the email address provided. You must describe the basis for your appeal.

Non-discrimination Statement. Stubble & Co will not discriminate against any consumer for exercising their rights under the California Consumer Privacy Act, or similar U.S. state privacy laws, as applicable.

Retention.  The Privacy Policy explains how long we keep your personal data for, above.